http.c: avoid freeing an uninitialized pointer